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Tl - System for detecting back door of kernel, and method for detecting back door of kernel and 

recovering data of kernel 
PR - KR20020024844 20020506 

; PN - KR2003086722 A20031112 DW200420 G06F11/00 001pp 
; PA - (ELTE-N) ELECTRONICS & TELECOM RES INST 

IC - G06F11/00 

IN - KIM H C 

AB - KR2003086722 NOVELTY - A kernel back door detection system and method, and a kernel data 
recovering method are provided to detect a vicious kernel back door like a Linux kernel back 
door, and to recover the data, changed by the vicious kernel back door, into normal data. 

- DETAILED DESCRIPTION - The system comprises a kernel module manager(1 10), an allowance 
kernel module manager(210), an allowance kernel module database(220), and a kernel module 
loading manager(230). The kernel module manager(1 10), positioned at a user area, embeds a 
kernel module management program for adding, deleting or searching a list of an allowance 
kernel module. The allowance kernel module manager(210) manages the list of the allowance 
kernel module which the kernel module manager requests to be registered. The allowance kernel 
module database(220) stores the list of the allowance kernel module allowed to be registered by 
the allowance kernel module manager(110). The kernel module manager(230) loads the kernel 
modules, which the user area requests to be loaded, at a kernel area based on the list of the 
allowance kernel module. 
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o\n^ 424^ *B?1^1 XI ^ #4 4 1 3*l < 3 4^^§- "?143°-iL 4^°!) «fl« 3 

^ -8-omTll ^714-, 4-E- 4^1§ofl cfl^: ^-4* ^7fl ^r^4^cfl 0)^4. -f-S^^- 4€- 4^°fl ^«a*i 
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133 3^3- 3fe 71 #3 3*fl 
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3-3* ^l^-fe-cfl £ 3-i- -52.33 ^4. 
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a*. 233 13 31 323 #3 3333fe 23 3-8-2 312-1 23 d(|23 333 a^ss. ^ 33) 

3 31 tfl-^ofl Si-g- 31 JE-l-ofl 3^ JW-i- 2i«*Ka. ©1 ^-i- 133-J1 ^Aj^7l 3*1)3 3333-I- o) 

-8-33 3^*1 -f-§- :£#3-3, 3^3 'create_module' 3=i^ 7}2.z\\ 31 2-13 323 33<>|| 3*j)37l 
^ofl a 33 3-8-1 31 2133* 333tt 333-g- *fl^23. 

22, 233 23 31 323 23 333*1^ 3^3 'iniUnodule' ^ 'delete_module' Alifl #-§- 7>S.^fe 
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fe ^# i^*Vfe 71^ «j2^ #3 «S-^-g- *ll^C}.. 

H^-, £ ^-Br A>7l 71^ ^2<H #3 Al^^g- Ol^ C^OlEl ^ 5U<H3, ^3 A>^> 

AJ71 711 *)-§- 711 2121 -f-^-*>fe ^7112}, ^7} ^X}*)^ -f-^fe ^"3 3"8- Til 2l2l ^ 
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71W3 3*fl7l- 3-8-3fe 3*11 31 2-1-3 ^3 31 ^ 013^01^3 ?n *ii3e13 3 

1 21 -SMMI ^7>3fe ^?113, ^-3 3*11 31 2l-§- a>3 ?h <g3«>|) 3^3-^ a>3 3*11 31 2-13 
aj 7 i ?ii <g3ofl 3^3 o.s 3*D3Sife3» 3A>3fe ^13. ^3 ^^1^3 ^3 3*11 31 21-3 3^3-°s. 3 
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33, 23* % v 2:33 133 3 5 £3S»- ^Ht -S333S ^33, -& 33°fl3 71)351^ 
^3cflofl 33 333 3s. 3^- 33^- ^3^. sa^-3. #3 •£ «■ ^33 7fl37> 213 

323-33 ^3 33* 7>33°1M1 133 ^-333 13^3 3*11 *H^3fe 333. 
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£ l* #3:^, l^ 33^ 31 323 Tg7] ^^1^ O.S. 3~g-3 332.iiL 333fe 3-8"3 ^#(1 

00)3 31 332-iS. 333^ ^ ??H200)2.ii. £3€3. 

3-8"3 *?K100><& 3 1 33 337 r Sj-g-S)^- 3 1 5L* 33"§- ^7>, 3*1] $ 1333 333 ?) ^ JL-f- ^3 H 
Ji.3<g3 xfl^-Slfe 31 J5L1- ^^(llO)* i%$3. 333. 31 21 ^-3-8- 31*1) 313 3333 Sife 3 1 2 
♦* £3371 333 3 13 3--8-*rjl 5fl^ ^1 31 3^S(Single Linked List) <§33 31 33334. 

31 -^?K200)-& #3 A>-§-3 §^(100H 5.^-1 31 SLf- ^^(llO)* 333- 2.^ 7]^ 2.-£^# S^-$3. 
333, 3-8" 31 -2-1- ^^-¥-(210), 3-8- 31 2/f- 33 e] 33^(220). 31 21 33 3r3-¥-(230), 31 333 
^f/^f 2l-?-(240), 31 33333^(250), 1 33/3T 1 2.1-*?-(250) « 3^8 # 33# 33 

333^(270)* £.#3:3. 

3-8- ?11 21 ^^-¥-(210)^ 313 3}^)7> 3-8-1 31 2.1 33"§- #33*r 2.133. 3-g- 31 21 3333 
3^(220)fe 313 3*fl7> 31 a* 3#* ifl-tt 3£ vfl^-sj ^om-ol 33-3^ 33333^(Databa 

se)33. 3 1 a* 33 *3-¥-(230)fc 3-§-3" ^(100)0.3.-?-^ 31 2133 -2-3)-§- 3"3 333^r 3"33 2 
t<>14. 31 333 3^/3?- 2.1-?(240Kr 3 1 3333 «13 3^3:2. ^Wfe- 2.133. 31 3 

o) El Kfl 0^(250)^ 33333 33-33 31 3337} 333fe 33 E} 3 + AjA-fl ^ ^)/^ 21 

-¥-(260)tt 3^"§ 1 Eflol ^.(System Call Table)-^ 133-2..S. 33 3^ 3^37] 3# SL^°}^. 3^*8 # 33-fr 
3333 oli(270)*r 31 3 -¥"3 €^*113£: 3^ # Bflol^-^- ^^s>^ c-flo] ^1^01^0]^. 

-f^id, ^(100)^ £f ^^-¥-(110)^ *)-§- tfl>S- 2.1-(Kernel Module)(<>l^. '«]-8- 2.1••^>I 

^ «-)«Sl ol s. s-s.^ *)-§- 7]^ 2.1- Cflo] E] ^01^(220)^1 f-^71 fl^l -S-71 *!-§- 7l\| olf ^Sls. 

■i- ^l^lEl-I- Sl-8- 71^ ^-¥-(210)5. ^^*>oi ^ A^-i- ^tf. ol nfl, s.^ «Bl^-(110)»fl 3$ 

*)^-?l^a#^ JL^^-Tl^al-^-El =SZl^-g-^<9Al^o.S.^ 01^.01^. 

*l-8- ?1W 2-1- #51^(210)^ 71^ 21- ^Bl«-(nO)S.-?-El ±^ *!-§- 71^ 21-ofl cfl^- ^-s. ^.^^ 

SE^ 71-?-% 91^}, =L 71^ «!-§- 71^ J2.1-S1 olf- ^ olf-o] sl-g- 21 cfl o} El B)] o} 

20)ofl ^^*V^1 3. -fr-^-ofl 4^ ^3^. 

ol "fl. i=8 *!-§- 71^ 2.1-ofl cfl^- 71^ 21^-el-¥-(H0)Sl ^-s. s)^. ?1 ^ 21 ^Bl-?-(210Hl ^ 

^^-f°fl D Jr, «)-8- 71^ 2.1 ^Hl-¥-(210)^ ^"71 7|^ 21S1 olfl-^^-oj 05^ ^ah ^EflS ^-g- 7l^ 21 
d| ol El h)| o] i(220)ofl *1 ^-^-cl-. 

olfif ^-ol, el^H ^EflS. *!-§- 711 2.1 cflo]BlHl)ol>,(220)o11 1* 2.11-fi) s.s.-f- 

■g- ^3*8 711 «3^-?-(120)* -§-*fl 711 21 ^Bl-?-(230)S. 3*11 *123 711 2-Kol*!-, '^Tfl Til 2.-l , ol2l- 
«-)l£] 3^ Sl-8- «^-¥-* #W*r 71^ cflolEiS ol-g-^c].. 

3#3°J ^*>Hfe 43°J*H Sl«fl 3*11 711 °J^^(120)S.-¥-El <a^5l^ 3^)1 5H 1 2.1-^: 71 1 2 

1 ^3^(230)011 3«fl ^3 3H- 3-¥-« Xlfe^, oi 71^ ^7l 3-8-Tll 213 f-^ -2.^ ^3 
3^fl 711 213 31- ^3 ^"y^: 31 213 313 3-8- 31 21 cfl33«H3^(220)o!| ^^3^3 =l -fi-¥- 

^13 3^, 31 21 3*11 ^3^(230)^ 3*1) 31 °J3-¥-(120)s.-¥-3 °J33fe 3*11 3 1 213 ?i! «123 
SEte 3^ 31 2133* %3(33, '13 31 323 ^3'3 %)33 333 ^3 3*1) 31 213 3 #3 3-8- 
31 21 33333^(220)°!] ^^)3^3# 3-°J^-3. 

3 3, 33 3*1) 31 213 3*3 3-8- 31 2.1 33333^(220)3 ^33fe 3-?-33 'create_module' 3^ 
^ #°1 3^-3-°-^- 3^-33 'insmod' «s.zi^(<^, 33 31 2.1-1: 31 33 3333 3^-HS.^^)^-^ 33 
% ^ 5H23 3-3. 

a33. 3-3 33 31 213 3#3 3-8-31 21 3 3 3 3 3^(220)3 ^33fe ^-°-32 3"3 3*11 31 21 
3 3^ 323 £fe 33 31 2!<U 7>^3-i- 33 3*fl% =r &i3. 31. 3-3 33 31 2.13 31 323 afe 
33 31 211 3-f3^ 31 ^?K200)3 32.3 33(323)3 33 33 31 2.1 333 31 33 3^^! 
1 331-, 3B3S €13 (Network Protocol Handler) ^31 21 3-3# i^3^ 333(33, "31 

333"3 %)7> 333fe 3-°-7> 1*133 33. 
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<>H <4^, n^g. SL* 3*R *3-¥-(230)S] ^7 r -& ^-71 3*1) Jl£ 2-1"^ °1§ 0 1 «)-§- ^ SL# *IMe1*l] o l^(220 
)ofl ^*I)SH 'create.module' -f- ol-f-o^^, 'iniunodule' ^ 'delete_module' a]^ -f- 7^ cflo] 

3 3f>/^ -5Lf-¥-(240)# -^-*fl cHlo]El^ aJ^ -fi-f-i- ^*lM*r. '2*1- 7^ also] W*b mtt. 

5^ c-noie] s.-I-?-(240)-& ^ t&Z H]°l6l»ll o li(250H 5Ufe ^ €-Sr °l-8- 

afH cfloiEjsl £3 -fF?-*- ^a>^-4. oi ufl. 7}^ t-floitH a°l ^-S-oflfe ^-=.3 3*1)€ 3*11 

£.!•-§- Tjvg "Jja^ £^ e}-^ ?m 2.1-5. *«*rJi, o] £33 ^ iH]o]e|# ^efla] 3^3?1 

°im>4). 31oiE)nfloii(250W)te 7^ *)s.<H *H 2^°fl 7r^8°l ^ 

o)ElS) 7^ 2-f- -IHf-g- ^^M^l ^.oV 2.1- T^^i}. a^H, JiL<?V 71 li 21- 3^3 

<?} 7]^ £f ^a}- <a^Sffe 7^13. SU^. °l°fl °*3. ^ «i£.«H £fe «H3 2-f-ofl 7^ 

21: -=-4=-°] ^^SJ<H JiL°> 7^ 2-f- s-s-^j. ^S^] &7fl S]<3, o]^ ov^ £fi o]8|)Ai ?^ 2-t 

^,7^ -§-?>(200)2] o)l2-el <3<iH ^ti^Hr 7})i a» -Sr«r& XI 31, ?1\t t-)]oi^ 

f-ofl^ 'modulejisf 7j\g e*H*Hf ^ 1 2-f- ^°fM 7}# a)e°fl 3*ti€ ?1\t 2-f- 

^ 7>el?lfe ^4iSr-§- 7M2 *m. ol^ *r3-. , create_ITlodule , ^1^^ #3 ^-flSM- °l-8-3r<»i ^7l 

^■2) tH^ a* 4^^. 

SE^:, «12£<H ^ ^1^^^. ^3E<H7> 5^ m<>11 3^fl€ 3^7> o>\i ^|^1^£ 

Kernel Timer) ^°1^7> ^ Si a]^^ # ^1/^ 2-f--?-(260)# ^-«fl a]^^ 

§ BfloJl- tflolElUfloli(270H Al^^ # «to1#fi) ^Af^JL, ^-f "life -QBflSl ^EflS. a-^L 

^1 3).^', -2S> ^ ^1 2r^' ^ >H)-g-^-Sr<H ^«g*V7lS. ^-cf. 

^> 

•f-s. £f #3^-(110)2r Sj-8- «-Bl^(210) Aj-oloflAi ol=^^^ *l-8- 21- -f-s. 21-3 

£. 2<>fl £A]^ c)-i-3r 

2. 2* ^ 2l-# *l-g- ?^ 21- ^-s-ofl ^^21- ^e} ^-(110X2 1 %^)S] ^ 

2j*H 2]cH 2l-«2l isaft ^*8?moa-7}l S21). 

v)2) 7§s)& oi^l-f- o]*^ ^ X\±y% m ^#^(^-7)1 S22). ^1 -a* «-^-¥-(110)2l ^ 

^a)-7> ^SFalA} -g- ?1 ^ 21- S] ^•^■(200)(2 1 *)-g- 21- ^r^-¥-(210)(2 1 % 

ofl^itH. -*7l ^-^ A]i^ -f-oDfe 'settimeofday' if -fi-Hi Aj^^ #(<>lsV, 'settimeofday Al^^ W°)^} 

•a 313. # ^ Sl^cfl, 'settimeofday' a)^ -^-7^ ^^1- ^e^DlBls. 7}^. m-^M. ^ ^ 21: £Sa 

^■S- 'settimeofday' a]^ -f-21 ^e^cl^ofl 2-f-^ o]s.^ 'settimeofday' 

'settimeofday' a]^^ ^£2] ^-?>o(| cfl^-s)7fl ^iSffil ^Efl* ^fe ^ 7 flsi Sr^lEls. 
cf. «>1 nfl, 0 tfl^l 10^ q^fr 7>^1^1 ^fecf. 3l.B^ D ]ElSl 0 ifl^l 10 A>ol 

' 2) ?t o] +ifcL, * « * SH!M ^ 7> 7>2l 7) ^ »fl £2) ^ ^ f-^-*>JlA> aVfe 8) -g- ^ ^ 21:2) o] ^ 

^•sr<^ 'settimeofday' a]^^ #-§- Ji^fe ^ ^- 4) ^ «r SlCr. °1 <fl, 'settimeofday' Ali^ ^-s) ^sfl^ 

o] ^.3^. 5). 7 )i4 ^ <7>a> 22^(Pseudo-Code)S «r Sl^r. 

'if(first_parameter is between 0 and 10){ 
extract module-name from secondjarameter 



- 5 - 



S3H^5j ^2003-0086722 



register module-name to allowedLkerneLmoduleJist 
} else { 

call normal settimeofday system call 
}' 

-8-7] #7fl S22^ ^ M±% 1 ^-#°1 0)^0]^ o_5L ?)g 21 ®^(110)2.*tt *)-8" 2 

1 ^^(210)31 #e)*H]7l) S)-g- ?)vj ai-o] g«^cK&4| S23). 

#7) #3] S23°fH *)-8- -8-33 ^-8- 7)H lf») *)-§- ?)\i 21 #e) -¥-(210)2) #2)7Hl7fl *1* ?)g S. 

1 ^-e) -¥-(210)2) ^-e^rfe 21 ^e)¥-(110)-S.¥-E) sfl# Tl^sl oj^-ol 21 cflol^aflo)^ 

220X2 1 &3l)SH ?))£ 2.1 4HM ^*D*Rr*)# ^r^^K^ S24). 

-8-7) #7fl S244H «fl^- 7)^2) «>l§.ol S)-g- ?)\g 21 C-flo)E) Mfl o)^(220)2l 7] g JZ.* JMMI ^*f)^ ^-foflfe 7) 

M a* ^a)^Kll0)£l >K£f *^ H.s.^i'g-g- ^a*>ja, ^.g. 5^ s.1 qo]vnq6\&( 

220W «11 al^S « EflS. si-8- n \fl 212) o]» ^^§. ^rfccKfcjfl S25). 

<1^> 7)g ^£<H f-*J 3j-^> 

'l*r *r#£r 3#3?1 ^-e)*} Hfe -M^fl ^SJ^H 2lSfl *)7]) ^^-?-(120)(S. 1 %3^3-^ 

7)^ 21 3*11 «8I^K230X£ 1 ?) g 2-1-21 aj 7fl7> a}2^ 3+, o) ^74) A]2jg ^74) ?lg 2,-g-ol ?Hi «j 

2<H £fe SMJ 7)\i 21-°J*1*- 3*r*rfe 3}.^ o.s.^ £ 30H *§3£# ^ £1}. 

2 3* #^«r<S, 3#3?] ^e)*)- ife AjA-ig ^SJ^rfe *j*fl ^ 21-g- 3*1) 7jg °J 3-¥-(120)# -f-*l) 7)g *#( 
200)21 ^2.21 <§«H a}*B*r7l 2)*|) 'insmod' "Sizfl* 43*8 ^(#7}] S31). °)7Mi, 'insmod'dnsert Module) i 
SH=g-£ 7}\g 2-1-ir ^^«r7l 21*W *>■§-=) fe- = £.zLigo.^ ( ^Aj-^o] A )^ #e)*W| 2)«flA-i ^ 

<8 5)7)1+, ?lgSl Vfl^. 7)\g tl)olEl# S^A^lt S-*)-§. 7 }x) ^ 2l-§- ^7fl«l-7l ^ S}-^ A]A;^ OJ 

7-H) 2l«ll^ ^^s)^. =^.3^o)rf. 

#71 tfTfl S31°JH 3-8-3?! #3*r Sfe Al^^ ^°j7>ofl sisfl 'insmod' *£.=L%<>) o_g. ^tg^^, aj^)7> 

3^1 2-«2l o}&& 7)14 £f :&el ^-(230)21 ^-Sl^l-S. ^-S:Sl-7l 21^ ' C reate_module' AjA-ig 
# ^# °l^-<H««««Jfl S32). 

#71 S32ofl>H 'create.module' # i# *3hol ^A>2j o_g_ 21^.5)^, ^7fl A)5.^ ^^fl oj 

»°1 S* 3^ ^elf (230)21 ^-elAHTll ^««tK^?q S33). 

#71 ^-711 S33^^1 3^ 5Hg -2-1-21 01^.01 if ^sl-?-(230)2l $ el 74.3. ?lg i-f- ^7fl ^-5l¥-(23 

0)21 $elA>^ ajTfl Al£^ 3*11 y)g 21-2) ol^-ol sj-g. 21 ^ °1 ^1 'fll °1 —(220)2) ?)g 2-1 <>lf- S-S-oJ a. 
^)«r^ll- 31 S34). 

#71 ^7(| S34ofl^ a}7fl ?)g £.12) ol ^-ol *l^. S.l c)]olEim)olA,(220)2l ?lg S.1 ol^. ^.s.ofl ^.7))^. ^ 
-fofl^ 'creatcmodule' a] Aig ^#^0.5. ^.9)^. ^.(^ S35), 'init_module' Ali^ Jit-sf.^ 9\ 
1 2.1^- 51 g *?K200)2l D«2el «g^ofl aj7flAl ? lcKTa-?n S36 ^ ^Tfl S37). 

#71 #7fl S38°1H ^ 21°1 ?)>t *?_K200)2) p)]25) «3^ofl ^#al o. s q^ 7} Qs.^, 'iniUnodule' 
Al^^4 'insmod' ^SS)-^ '1*)- ?)g «j2<>) ^1 s)-^'-§- ^5.^(^71] S38 S #7fl S39). 

#71 #741 S34°fl*) 212) clf-o] g).g. 21 0101^^01^(220)21 ?)g 21 ojf - ^ 

sf^l ^ #-f °))fe #7fl S395. o}^-s>ol -insmod' £U1|- f'S-^c)-. 

<2^ r ?)^ «|2o1 tf*l'sH}> 

'2*> ?)g ^2<H ^1 W-fr 7)^ ^?V(200)21 ofl2e) oj^oj) v)^ tflolE)7)- #71 '1*1- 5Hg ^2©) # 

3j-^'o)l^ o)=ol^)^ ^Tfl 71^2) 2)711 3r^*l cfl ol #^ol 5fl^*)# ^Af*!-^. 21-3 o.^, 2 4*11 2Al^ *s. 
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2. 4# '2*> ^ «?£<H %*i '1*> *MT«HM 5- 3°fl 2^ S34 

ol^^lfe 43-£S>l ^5}^ #7ll S41 5 ^-Tfl S42fe S35 « S363J- -f-^^ ^ .£..£. 1 ^ 

#7l S41fe 'create_module' 1* ^-fl^W 4^&-fr *)#*Kr <&7fl3Ai, ^22) ^ofl 

^HH^. ^7^, ^ft-fr 3*8 3*fl« **K200)3 *H5L2) 7 r el7lfe -^SKAddres 

s )o]oj ( ol ft* ^^15. 5. 3°(M ^^tl: 'create_module' Al^tfl #0] x#s)ji, f^sl£ ^. nfl 0.3. sH^ ^ 

*K200)£1 °H2el °J«H ^=9-€cf. 

-8-71 T2-7J] S42fe- 'init.module' !-§• , init_module' -M<8*r-te- i&*Mt%. °1 'init_ 

module" Alii # Ji#ol ^Aj-aj ojg. 0]^^^, 5^ t^o]^ 2l^-(240)(2 1 #20°1Hfe 5^ 

^o)^mioii(250)(£ 1 ?m «•& «imei* oi^.§h n^^m?} £*3safc*i* *j*iw<«*i 

S43). 

^71 Cflol^fe ^£<H Sfe «H§ 7l>| 2.1-01 7j\| Ifl^-S) 7l\| ^olEl«- ^>gA)-7)Cl^ 

ajoj -fr^fe EflolE]^, n cfl#o.£fe 7^ tiM3£rf-ti«r>n Ali^ § Hllol-i-. 7l ^ 2.1 9i =.3. 

#7l ^7fl S43<**1 ^ ^M^V ^slSM- . 2 */*■?■ ai^-(240H^te- «HMEj»fl 

ol^(250H ^ OH 3 21 ^^a-i- ^•i- ol-8-*H -S-^P-SrJi. n 

*1 S44). ^7) n°\^7\ ^lS^H ^#=)fe SjlSL^, «H]°)ets] ^^-§- g 

*<M?1 7^ 5L!3 7l^ 2.1-8- 3*1)S|3l:a Al7> * fflolElSl it>«.Vcf. 

13-^, ^7] ^-^1 S43^>H ^o]^7> ^^5)^1 ^-XJ:* ^-f. ^-Til S45S. 'l^V 
£ti *?K200)^I ^-2- el ^^°fl ^^^(^^1 S45). 

#71 £7fl S44°l)Ai cflolel 4H 1 ^ S45S. ol^-s].^ 'l^ »J12<H ^^-^ ^s}^ 

2j?fl tH^ S-l-^ ^-?>-(200)fil "1)2.21 ^^ofl ^l^^-. 

-*7l S45°1H 2)^11 71^ 2.1-21 ^^)7f ^-S.Sl^, 'insmod' 5.3.3.%-& ^S.^t^K^ S46). 

^'-a- tflolEl Bflo]i:(250)°fl Til^ jit> 71^ 21 -SHra- ol-S-^ «!2<H afe 71^ 

£fi slSflA-j 3HE171- ^# ^l^Jl, 71^ ^ 1L3.*\ 51 5°fl 2.^1^ *f- 

2 5# ol SL^^g: 2 4°fl 2.Al^ *f-2.# ^-Sfl^>c^ sla^ 2°3o.S.A"l t '2*1-71^ ^2^ ^^1 4 

'4T 1 4^'* ^M-Sl *#2. tflofl 2^1^ *#2olcl-. 

^1 S51 ^ ^) S52fe '1S> 71 \g ^£ol ^1 a).^' ^ -2*> 71^ ^2<H ^1 ol^.<H^lfe ^7|1S.a1. 'i ns 

mod' =E.sn^oi ^s]<3 A>-f-al o.s. 'create_module , ^o] Ji#5loi nfl£.e) %<g-ol oi^^i jjl 'create, 

module' a^^ #2) *\*m$= ^?l]olcf. 

$7] S52*H*\ 'createjnodule' a^^ # ^-^S-ol 7^5)13, ^. ^-tgoflA-1 x|)§7)l ^aI^V •init_module' a^^ 
1 SLt*^ -f-^l 'iniUmodule' ^l^l(ol«l-, , init_module_new Al^-olaJ. ^-)^ ^^(£3) S53). 

a>71 ^ S53»fl^ 'init_module_new' Al^^ol ^^s)^, ^7fl a}?fl ?1^ 2.I2I o)W& ^"i ^ ^01^^01^(2 
50)21 ?11 ««• ^olBloll JL^-€ 21 ^oj| ^71-^(^7^1 S54). 

#71 t&A S54°1H aj^j 71^ 2#ol 7) ^ 21 s.s.ofl ^7>£)^, ojaV^oj •init.module' A 1^ E J 1 ±& -§-# 
* 3*fl ?1 ^ £ft ?1 ^ ^^200)2) BJ12B1 °|^ofl 2l?ifl^- ^ 'init_module' ^1^1# S5 

5 vfl^l ^Tfl S57). ol 43,2 2 3ofl 2Al^ c}7)l S36 *fl*l S3831- ^oj^j. ^o_s. ol^o^c}. 

#71 S57ofl^ •inicmodule' Al^^ol ^s.^, 'init_module' -^sl:!- ^A^ol ^^fl 7l^ 2.1©! 

71^ ^?!(200)2l iflaej <g2loll ^§#ai o.S. ^xflslSi^i^. ^a^cH^ S58). "fl^cfl, 'init_module' Ali^^ 
*j-?m-g- ^A}Srol 4?iaol '-l'ol^, aj^fl 71^ 2.I0I al^sl^l ^-§- 2loi^, 491^01 --roi o^^, ^s$q 
SLS. 3*» 2lol ^?fl^ esj-a- 2H^. 
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-8-71 TEt^fl S584 4 34 Til S-1- 0 1 ?11 ^*K200)4 4-2-4 «344 343-2-S- 3*83*1 
4tf a* ^7>€ 3*fl ?11 2-1-^ *<tf* S59). #4 S60aa 4-§-^4-. 

44 £4 S584 4 34 ?11 -2-l- 0 l ?11 *?K200)4 42-3 °J44 H^jos 344SMr 3-?-4fe #31 S60.S. 
£ 41 41 5L1- ^-s-o) £34S**r*l^ 3434-. 

44 #4 S604*i 41 41 af- ^-s-o) ^^sisi# 3-"Mlfc #31 S6ia 4^4.4 «43 41 a* 
% n anst-i- 44$- * 1&4 S62a 4^4. 

47l i3:7il S604*l 41 4-Y-4 41 al- £344 3-f4^- #3) S6ia 4**H 'init_modul 

e_new' 4^-i- ^S.tt 'insmod' "a^-fr ^£.$4. 

4444 ^. 1-^4 4^3 a>4£. 443$ ^aHo^ ^-^^o^. 4<£4&o.4. AJ-7RV 4*Hfe Zl -£4 
.g. 4$. 4014 a 4^§- 4$ 4°1 W«M^ $4. •& tf** & 1^4 4# £-o>4 .§.44 #-§-7} 

43 -g- ?1#3 Apa-s] £4 444 4"*$ -g447> 7Hf«* <r 5U^: 4°m. 

1«34 3:4 

4^$ 44 £4, .g. 14-8- '1*1- 41 4a4 <§-4 44 * '2*1- 41 45=4 %4 444 *<>1 213414 41 4s 
4 44 43-i- #*fl 34-^ 44 41 4-E44 44 Til ai-o] 444^ 14^^. 44^ *r 

a4 41 4^ *MJ 1* ^^fl ^ *l)44# '24 41 4£°1 44 44-i- -f-31 

f7|«n, $44 tii 4°13# 343°1 41 4 6 14-£. ^Ai^aa^ 41 45144 ^ ^"a-i- Ji^aa « 0 V 

(57) 

A>-g-7> «g^ofl ^^lsl^. Til xflofl 3^fl7> »l-§-^^ *)-8- s^a ai-sl ^7>, 4-4 ^ ^2l«1-7] 
at ^ aazi^^- Ml^fe at «r2l-¥-; 

471 Til if ^el^s^Bl sl%s\±; 47] «|-8- t)1 ai-si ^-i- ^-2l4fe *!-§- 711 s.^ 

471 «l-8- Til a# ^-Ei-^-ofl 2i«fl -f-s. *i7>^ 471 *)-§- Til a-f-s] *l-8- Til al- tfloiEiaJioi 

471 «l-8- ?11 a* ciMiHmioiiofl ^4« 471 «l-8- tii af-sj ^-gr atfla 47I a>^-t.> o^aa^-ei 34 
^.^sife 34 tii af-i- 47l tii iflofl 34*Rr tii a# 34 ^r^-¥-* ^-i- #^aa ti 

1 *H5.°] ^"71 4>:^. 

2. 

4 l ^-4 Si«H^,47l *l-8- tii -2-1- ^el^-^ 471 Til a* ^-¥-a^-Bi -i-s. 4?1 «l-8- Tllai-sl 

471 *i-8- tii a* 4°lEl4 0 li4 ^4*W ^ Aflii'W; ?J-i: ^^-S. *Ht ?11 

^a«H f-^1 Ai^g. 

^^jt^- 3 

4 1 ^4*Sl<>1^, 47l ^-8- 711 air^l -=~Sho ^. 7] s)^. 5L-1- 401 el4oii4 ^-^ ^4^. 4 

4s)^- 5J€- f^^i eRr tii 4a<H ^-4 4^^. 

4 1 ^4*Si44. 47) Til ^4^4, 44 4-8- 41 a«-4 ^1 € 

t-flo]El4oli; 

44 711 401^401^4 444fe 47l 41 €-& 444* 47l Til °J4°fl ^4=)^ 41 444^1 
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A 4 sfloH. #71 €■& « 7l\| 3Mb)^ a]>^ «. E )) 0l £. i nje^^ £ S£f ig-i- el * 7}^ 2 

* wa- 3] 01 ei o) 5!^ ^=-3 *Hr ?i^ «i5.<>i <t*i Ai^^j. 

^T 1 ^ 6. 

$a°H, #7l 7^ <8<3 vflofl *]4|5H, #7l 7)g iflofl T^S)^- *|g C-flolElSl ^ Bfl°l-l-§- *1#3} 

Ali^ -f. EfloJ^- CflojElBfloli; ^ 

#71 ?1^ t-flolElsi -fi-^-i- ^l«f7l #71 Aii«g 9 Efloi^-ai Jp-^-g- 3*>*te. 4^^. Ai^ig § 
?}-Al/4^ JLt^t c-1 S^SHf- 3* SVfe 71 vg ^H<H ^1 Al^^. 

^T 1 ^- 7. 

1 ^ tfl*l *l 6 ^21 ^-## 7>^fe ?l^ qs.o) f-*l ai^^j^. oj-g.^ 5^ Hjj^oi ^1 wj-^ofl 

(a) #71 A|~g.*> ^^0.5.^ #7J 7^ <8«? *!-§- il-21 -H.5L.g- =.3.^ ^jfl. 

(b) #71 (a)^-7floflAi -f-^-S]^ #71 Sl-g- 7^ J2.-&S1 StflS #7] A}-g-*> <§ ^.0 jS.-^ ^jfl aJs.^ 
^ fil-ofl tj)$ aj*|| *!-§- ol-^# ^l«hfe ^-7)1; « 

(c) #7l (b)ia-?l)<HlAi ^Xfl7l-«)-g-5l^#7l aj^j) 7^2.1"°1] fil«|)#7l 7^ *H *j g e]) ol B\ 7> ^ ^ 5| 
fe*l* iM^Rr ^Tflfl- 3L#3}-^ 3}* 4^J-S. ^Hr 7^ ««£ol ^1 MJ-^. 

*fl 7 ^ '<U<>1A1, ^-7] (a)^^^, 

(a-1) #71 Al~g-X> <^Sj 7}\t 21 *Sfl #71 7^ <g^Sl S)-g- 71^ 2-1" ^El^-S. #7l S]-g- 7j ^ 

21 °lf"§- ^^«>fe 07fl; 

(a-2) #71 7i<fi 21 ^.El^-^El ^« ^-71 Sl-g- 71^ £1-21 oj^ol Aj- 7 1 *!-§- ?i v| 2-1 tfl 0^ Hfl o^ofl ^ 
^ Sj-8- 71^ a.# 4HHI ^*H*H^l# ^A>^ ^7|); ^ 

(a-3) #71 (a-2) «:741«>fl^i #7l «l-8- 7]^ 5L^ »-§- ^-f, #7l s)-g- 7l^ SL^r3\ o]&~£ ^7) 

n -g- ?m ^ofl ^sffe 5E#bRt ^-#^S. ^?1^ ^£<H #*1 

^t 1 ^- 9. 

^1 8 ^"D ja^Al, #71 (a-1) ^Tflfe 

(a-1-1) #71 S1-8- JSL1-21 «l#-i- -f-^-tl-71 J?1*H #71 Al~§-^1- 51.= ^^.21 71^ 2.1- ^e) 2 

(a-1-2) #71 *l-8- 2.1-sl ol#-§- #71 71^ «§^5l *!-§- 71^ 2.1 ^-e)^ 3U-S1-71 $\-^°\ ^ A)^^ $ 
, (a- 1-3) #71 Till 21 ^el^^El #71 81-8- tS^ 2.-1 #7j «!-§- 7l^ 21-21 ^^fe ^^}» 

s^-sHr 51* f^'AS sl-fe 71^ a|2.<H U-*l 'S-'S. 

• ^T 1 '^ 10. 

*fl 9 ^°fl X!^^. #7l ^3 Ali^ p})2el <g^ofl Cfl-g-SlTll ^2)tSl ^Efl# 7^]fe ^ 7flfil ^V}^ 

3. 7>^H, ^i^ *H5l2i j^el-nlEl sto.s.fe 0 ^fl^l 10 Afoisi a* 0 l-8-sKn.. ^ ^i^ H^sl ^-efuiEi7> 7>^7lfe 

"1)2.21 «g^oHfe Aj-71 *l-8- 71^ 21S1 ©If-^. ^#*H 7 A-k ^SLS. ^71^ «Jj2o] ^] 

^■T 1 ^- 11. 

>J 8 ^ Sa^A-j, AJ. 7] ( a -3m7floflAl AJ. 7 ) ^ 2.1-Sl ojl-o. ^-^ Sl^E ^Efl S #7l ^-g- 7^ ^ 21 
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3^ 12. 

(b"2)^7] Al~g->q. O.S.-?-E] #71 ^Tfl 5^ Ol^-Ol *].§. 5^ 2.^- £fl O) Hj) 6] ^ofl 

*)-8- JLlr e*fl*Hr*l* #3]; ^ 

(b-3) (b-2) «j4MH ^71 *|g 2.1-21 °l-f-°l €^*Rr 3^, ^7] 3*11 ^"4. S-l-§- #7l jH^ <geW 
^T 1 ^ 13. 

*i 12 sa^Ai, ^7i (b-im^i^, 

(b-l-l) ^71 ^V-8-71- <3^s) -insmod' ^«!8*Hr ^Tfl; £ 

(b-1-2) ^7] 2.1-^ o]s.^. >y. 7 ] ^ s-l- ai^D ^-el^-S. &^7) 'create.module' A\^*g #■§■ 

;£#*Br #7»» Stf*Hr ^-3-2-5. SRr ?l\t ^£-<H 1-^1 MM. 

14. 

*ll 12 <g-4) 5a<>H, ^"71 (b-3)9?(lfe, 

(b-3-1) ^"71 (b-2)T&3j°iH ^7) ^Tfl 5^^ S.#Sl o]^-o| ^*fl«Hr ^"7] 'create_module' fl ^-^ 

(b-3-2) #7] aj*H -S-7) <g<3ofl a}*fls]-7l 'init_module' Al&< #-& Sl^^b £11: 5 

(b-3-3) ^71 •init-module' ^^4. 'insmod' "laff o. j= f-s.^ ^-7fl# 3-g- ^?££ Si 

3^ 15. 

(c-D^7i o>)«*hm ^-7i ^ s.* ^7i <g^ofl *mbw VTMt ?»■§- #*i 

^n 1 ^ 16. 

is ^ sa«H^, ^71 (c-im^ife, 

(c-1-1) ^"71 2\4 3.%-%: Z\A°\7] 'create_module' ^1^^ 9$ ^"fl^* §J 

(c-l-2)^7l 5H^ ^<>l^^--*7l -Q-g- ^o|e)i. w]s«>7l 'init_module' ^1^^ ^^|# 

i^fe ^-^J .52.5. ^ nj-ig. 



>il 16 Sl<H^i. ^7l 4^1 S-fr ^71 HH\ ?]y£ s.i-0] >«-7l t)^ <$<$4: 7}3?l*r ^dt7Jt»l«!. <>1 St-S- % 

71 'create_module' a]^^ §o] i#£|j7, f^SJf nfl 0.5 ^7l 9]^%^ 5!^: ^^^5 



(a) -S-71 ^>-§-x> «jJ^o.sJf-^ ^7} O.5. «l-g- 2.1-21 s.^.* ^^1; 
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(b) ^7) (a)3?IN*l -f-^-Slfe W *!■§- ^ £<fli o_S.^ ^ a]je€ 3*im 

1 cfl^. ai^n sj-g- ^ <g-*i«Hr 

ejsl Ji?> a* ^°fl #7f\; 

(d) -»7i ^341 ?iw s** -*7i «3«W *l*flsH=- 3:3); 

(e) #7) SLl-ol ^71 <g«ofl o.S af45)£fe*|l- £A>*|-fc 



(f) ^7l <e)tt*«M #71 5^ 2.-f-o] a}*flsl$-§- ^-f. ^7l 5H\g <g«W ^^fe ^ ^0)^7} 

(g) ^-7] (fm/flofl^i -S-71 ^ c-flo)El7> 5*ji4 3M3# ^-^*>i, iL^SM- *WRr ^ 

19. 

*ll 18 ^41 5a°H. ^71 (e)^-Tllofl^ ^-71 ajzfl 3.^°) ^sj-q o_s. 3*fls)*l , W (c)^?!) °1M 4> 

7f« ^-71 SL-f-s} 01 ^n* oj s^-sv^ 3* ^ *H=- ^ « 1*1^ 4? 
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MH«itWl*listWI*( 




-S59 



i z: 



'iniLroodulejiew 1 f 3. 

CiD 



-S61 
• S62 



- 14 - 



